Information Security

Scholar

 Scholar
Ask a question and accept an answer.
Awarded 16475 times.
Can a machine running a packet sniffer see what nginx is forwarding on localhost to a Flask app?
Awarded 4 hours ago
How do applications which are integrated using a javascript client side sdk, secure their data or disallow spam?
Awarded 13 hours ago
How to display the SHA256 hash while signing or in signature
Awarded 20 hours ago
Is passlib cryptocontext verify method security for timing attacks?
Awarded yesterday
How to properly export and re-import GPG secret key and all its subkeys?
Awarded yesterday
Is combining salt from two places secure enough and what length
Awarded yesterday
Can you protect against SQLi without using prepared statements?
Awarded yesterday
SSH and PCI on Insecure, Dirty Side
Awarded yesterday
SQL Injection syntax inquiry-commented injections
Awarded yesterday
What's the point of Empire if all payloads get flagged?
Awarded 2 days ago
Are GNU coreutils SHA digest functions FIPS-validated (in NIST's Cryptographic Module Validation Program)?
Awarded 2 days ago
Are hosted bare-metal servers more secure than VPS against unauthorized disclosure?
Awarded 2 days ago
Why can't we perform a replay attack on wifi networks?
Awarded 2 days ago
Is there a way to change your current UID to equal your EUID?
Awarded Apr 15 at 13:43
Suspicious GitHub fork
Awarded Apr 15 at 11:57
Is it possible to calculate an encryption key when both the plain text and ciphertext are known?
Awarded Apr 15 at 7:47
Does a BitLocker recovery key have any use on removable media, a.k.a 'BitLocker to Go', other than if you forget your password?
Awarded Apr 14 at 12:47
Is it secure to send personal data via HTTPS?
Awarded Apr 14 at 9:46
Risks associated with IP whitelisting
Awarded Apr 13 at 15:40
How can I store and manage my GPG key pair securely?
Awarded Apr 13 at 13:33
How does a chosen ciphertext attack work on textbook RSA?
Awarded Apr 13 at 6:05
Relationship between DoT / DoH and HTTPS
Awarded Apr 12 at 11:05
Is interface spoofing possible?
Awarded Apr 11 at 15:56
Making website queries and return a large amount of data, can it be exploited for DOS attack?
Awarded Apr 11 at 5:16
When to use envelope encryption and when not?
Awarded Apr 10 at 15:56
why is supporting digest authentication necessary instead of other more secure ways like applying non-reversible transformation to password?
Awarded Apr 9 at 15:20
How are docker containers affected by CVE-2021-3156?
Awarded Apr 9 at 7:25
Is it unsafe to publish your nginx configs?
Awarded Apr 8 at 17:32
ssh login attempts still showing up even with password login disabled? [duplicate]
Awarded Apr 8 at 14:18
Why would you use random algorithm for CSFLE if you can't query the inserted data?
Awarded Apr 7 at 8:25
How NTLM SSO is preformed on smartcard Kerberos logon?
Awarded Apr 6 at 16:47
Should all GPG keys begin with 0x?
Awarded Apr 6 at 14:36
What exactly are the session injection concerns when using Firebase Signin Links?
Awarded Apr 5 at 21:07
gnu gcc source archives signed with expired GPG key?
Awarded Apr 5 at 20:40
How to interpret “Verify the use of a secure software development lifecycle that addresses security in all stages of development”?
Awarded Apr 4 at 5:55
Are long-lived SSL/TLS certificates acceptable for non-public resources?
Awarded Apr 3 at 20:26
Allow only YouTube videos and block other videos
Awarded Apr 3 at 16:33
Verifying hardware-backed key pairs with Key Attestation
Awarded Apr 3 at 8:25
CTF setup for debugging heap exploits
Awarded Apr 3 at 7:25
On a server to server SSL connection is there any trustable information identifying the calling server?
Awarded Apr 3 at 0:46
How to ensure identity for server-to-server communication over IP
Awarded Apr 2 at 10:27
TLS 1.3 HKDF-Expand references to Hello messages
Awarded Apr 2 at 3:10
Is it safe to send an encrypted blob as a URL parameter?
Awarded Apr 1 at 18:23
Manage API key on mobile platform
Awarded Apr 1 at 7:17
Is it possible to use X509 to verify other information, like a vacination?
Awarded Mar 31 at 20:05
What is a secure way to send credentials to the server?
Awarded Mar 31 at 18:48
When using public/private keys to secure app licensing info, couldn't someone simply replace your public key to defeat it?
Awarded Mar 31 at 15:46
Can PHP files be dangerous without executing them? [duplicate]
Awarded Mar 31 at 6:20
Is image uploading to a database secure if you resize the image first in raw bytes?
Awarded Mar 30 at 16:07
(post deleted or otherwise unavailable)
Awarded Mar 30 at 15:56
WPA/WPA2 networks without passwords [duplicate]
Awarded Mar 30 at 9:36
How can I safely print a keyfile on paper?
Awarded Mar 30 at 8:33
Does Windows log desktop application passwords?
Awarded Mar 29 at 22:42
Authenticating root certificate
Awarded Mar 29 at 22:26
Is using sensitive information to generate a UUID v5 considered secure?
Awarded Mar 29 at 19:00
Validity of a WAF as a Compensating/Alternative Control for CSP, X-XSS-Protection, etc [closed]
Awarded Mar 29 at 15:00
Google Chrome, the best bet for online privacy? [closed]
Awarded Mar 27 at 20:58
Signal messaging app / How does sync on connected devices work?
Awarded Mar 27 at 14:25
Can HTTPS request parameters be seen by the PC client?
Awarded Mar 26 at 18:42
Python desktop application: storing cloud database passwords
Awarded Mar 25 at 23:47
1
2 3 4 5
…
275

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.